fix(deps): update module github.com/lestrrat-go/jwx/v3 to v3.1.1 #35

Merged
Renovate-Clanker merged 1 commits from renovate/github.com-lestrrat-go-jwx-v3-3.x into main 2026-05-07 08:05:29 +07:00
Collaborator

This PR contains the following updates:

Package Change Age Confidence
github.com/lestrrat-go/jwx/v3 v3.1.0v3.1.1 age confidence

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

v3.1.1

Compare Source

For more detailed release notes, see Changes.

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.1.0...v3.1.1


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) | `v3.1.0` → `v3.1.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fjwx%2fv3/v3.1.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fjwx%2fv3/v3.1.0/v3.1.1?slim=true) | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)</summary> ### [`v3.1.1`](https://github.com/lestrrat-go/jwx/releases/tag/v3.1.1) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.1.0...v3.1.1) For more detailed release notes, see [Changes](https://github.com/lestrrat-go/jwx/blob/v3.1.1/Changes). #### What's Changed - build(deps): bump pozil/auto-assign-issue from 2.2.0 to 2.2.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2045](https://github.com/lestrrat-go/jwx/pull/2045) - guard ecdsa coordinates against oversized big.Int by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2050](https://github.com/lestrrat-go/jwx/pull/2050) - reject jwe with conflicting alg in protected vs per-recipient by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2052](https://github.com/lestrrat-go/jwx/pull/2052) - fix AddressClaim.MarshalJSON for non-printable bytes by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2056](https://github.com/lestrrat-go/jwx/pull/2056) - jwt: only call ParseForm when WithFormKey is supplied by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2058](https://github.com/lestrrat-go/jwx/pull/2058) - jws: jkuProvider rejects fetched keys marked use=enc by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2060](https://github.com/lestrrat-go/jwx/pull/2060) - jwa: unify SignatureAlgorithm/KeyEncryption/ContentEncryption into one registry by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2066](https://github.com/lestrrat-go/jwx/pull/2066) - build(deps): bump pozil/auto-assign-issue from [`f245a91`](https://github.com/lestrrat-go/jwx/commit/f245a9119ba5cc2fed4aa7b8268d576d40acddf0) to [`7bf9d82`](https://github.com/lestrrat-go/jwx/commit/7bf9d82c77d45976224660b873fc83e60576c5aa) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2065](https://github.com/lestrrat-go/jwx/pull/2065) - cmd/jwx: warn on private-key-to-tty + reject keysize<=0 for oct by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2071](https://github.com/lestrrat-go/jwx/pull/2071) - jws: refuse "b64" header in VerifyCompactFast by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2081](https://github.com/lestrrat-go/jwx/pull/2081) - jws: VerifyCompactFast refusals match jws.VerifyError() class by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2083](https://github.com/lestrrat-go/jwx/pull/2083) - jws: name loose keySet options in fan-out verify error by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2085](https://github.com/lestrrat-go/jwx/pull/2085) - jws: honor RFC 7797 b64=false in Message.MarshalJSON by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2087](https://github.com/lestrrat-go/jwx/pull/2087) - jws: reject literal-JSON "protected" in general-form JWS by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2089](https://github.com/lestrrat-go/jwx/pull/2089) - jwt: ParseRequest: don't skip form body on chunked transfer by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2091](https://github.com/lestrrat-go/jwx/pull/2091) - jwt: pedantic mode enforces cty=JWT nested-envelope shape by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2094](https://github.com/lestrrat-go/jwx/pull/2094) - jwt: defensively reject missing claims in MaxDeltaIs / MinDeltaIs by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2099](https://github.com/lestrrat-go/jwx/pull/2099) - jwt: ParseInsecure: parse loop-local payload, not original input by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2097](https://github.com/lestrrat-go/jwx/pull/2097) - jws: Verify rejects b64=false without "b64" listed in "crit" by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2102](https://github.com/lestrrat-go/jwx/pull/2102) - jws: Sign auto-declares "b64" in "crit" when emitting b64=false by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2104](https://github.com/lestrrat-go/jwx/pull/2104) - jws: declare "b64" as typed bool header field by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2106](https://github.com/lestrrat-go/jwx/pull/2106) - jws: reject general-form JWS with top-level "header" sibling of "signatures" by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2108](https://github.com/lestrrat-go/jwx/pull/2108) - jws: typed sentinel for AlgorithmsForKey unclassifiable-key failures by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2110](https://github.com/lestrrat-go/jwx/pull/2110) - jws: VerifyMessage observes ctx cancellation between loop iterations by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2112](https://github.com/lestrrat-go/jwx/pull/2112) - jws: cleanup follow-ups from recent review (low-severity batch) by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2114](https://github.com/lestrrat-go/jwx/pull/2114) - jwe: DecryptMessage observes ctx cancellation between loop iterations by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2117](https://github.com/lestrrat-go/jwx/pull/2117) - jwe: parse and bound-check PBES2 p2c in int64 space; name the violated bound by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2119](https://github.com/lestrrat-go/jwx/pull/2119) - jwe: WithKey validates alg-vs-key shape at option-time by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2121](https://github.com/lestrrat-go/jwx/pull/2121) - jwe: compression cap error names "decompressed" payload, the option, and the size by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2123](https://github.com/lestrrat-go/jwx/pull/2123) - jwe: bound joined-error count and drop redundant outer Decrypt prefix by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2125](https://github.com/lestrrat-go/jwx/pull/2125) - jwe: keySetProvider surfaces per-key errors via errors.Join by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2127](https://github.com/lestrrat-go/jwx/pull/2127) - jwe: add WithDisabledKeyAlgorithms global policy hook by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2129](https://github.com/lestrrat-go/jwx/pull/2129) - jwe: document WithMaxDecompressBufferSize behavior at non-positive values by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2131](https://github.com/lestrrat-go/jwx/pull/2131) - jwk: stop duplicating JWK fields at JWKS top level on parse by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2133](https://github.com/lestrrat-go/jwx/pull/2133) - jwk: wrap ParseKey errors with ParseError sentinel by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2135](https://github.com/lestrrat-go/jwx/pull/2135) - jwk: stream the keys array with cap-before-allocate by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2137](https://github.com/lestrrat-go/jwx/pull/2137) - jwk: treat nil key from custom KeyParser as continue, not success by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2140](https://github.com/lestrrat-go/jwx/pull/2140) - jwk: fix phantom ContinueParseError refs and unmarshaler typo in docs by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2142](https://github.com/lestrrat-go/jwx/pull/2142) - Changes: draft v3.1.1 release notes by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2155](https://github.com/lestrrat-go/jwx/pull/2155) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.1.0...v3.1.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjAuOCIsInVwZGF0ZWRJblZlciI6IjQzLjE2MC44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Renovate-Clanker added 1 commit 2026-05-07 08:05:27 +07:00
Renovate-Clanker scheduled this pull request to auto merge when all checks succeed 2026-05-07 08:05:28 +07:00
Renovate-Clanker merged commit 47a806baf3 into main 2026-05-07 08:05:29 +07:00
Renovate-Clanker deleted branch renovate/github.com-lestrrat-go-jwx-v3-3.x 2026-05-07 08:05:29 +07:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: bagas/tunnel-please-controller#35